Project

General

Profile

Support #19875

Update software and documentation for the change in OSG factories

Added by Marco Mambelli over 1 year ago. Updated about 2 months ago.

Status:
Feedback
Priority:
Normal
Category:
-
Target version:
Start date:
05/02/2018
Due date:
% Done:

0%

Estimated time:
Stakeholders:
Duration:

Description

OSG is changing:
  • OSG CAs will not provide or renew certificates anymore after May: factories/frontends may change DNs
  • The factories hosted at IU (prod/ITB) will go away on 5/23, UCSD will install an ITB factory. There will be only one production factory: We'll have to update the default configuration shipped with GWMS and the configurations used in our setups and the DN/addresses referred in the documentation

Related issues

Has duplicate glideinWMS - Support #19744: Change the DN of the factories in the default Frontend configurationRejected2018-04-18

History

#1 Updated by Lorena Lobato Pardavila over 1 year ago

  • Status changed from New to Work in progress
  • Assignee set to Lorena Lobato Pardavila

#2 Updated by Marco Mambelli over 1 year ago

  • Target version changed from v3_4_0 to v3_4_1

#3 Updated by Lorena Lobato Pardavila about 1 year ago

What I got from Marco Mascheroni:

the new DN is : DC=org/DC=opensciencegrid/O=Open Science Grid/OU=Services/CN=gfactory-1.t2.ucsd.edu and the hostname is gfactory-1.t2.ucsd.edu

This ticket will be held until we have the new factory is effective.

#4 Updated by Lorena Lobato Pardavila about 1 year ago

  • Assignee changed from Lorena Lobato Pardavila to Marco Mascheroni

Marco and me agreed to assign this ticket and #19744 to him. Once he has the new hostname and DN, he'll update the info to both thickets and then assign them to me to update the documentation and packaging.

#5 Updated by Marco Mascheroni about 1 year ago

  • Target version changed from v3_4_1 to v3_5

#6 Updated by Marco Mascheroni 9 months ago

  • Target version changed from v3_5 to v3_5_1

#7 Updated by Marco Mascheroni 2 months ago

  • Assignee changed from Marco Mascheroni to Lorena Lobato Pardavila
  • Status changed from Work in progress to Feedback

#8 Updated by Marco Mascheroni 2 months ago

The new DN is:

[1026] gfactory@gfactory-2 ~$ openssl x509 -in /etc/grid-security/hostcert.pem -noout -subject
subject= /DC=org/DC=incommon/C=US/ST=WI/L=Madison/O=University of Wisconsin-Madison/OU=OCIS/CN=gfactory-2.opensciencegrid.org

#9 Updated by Marco Mambelli 2 months ago

  • Has duplicate Support #19744: Change the DN of the factories in the default Frontend configuration added

#10 Updated by Marco Mambelli 2 months ago

From 19744:
There is a template for the default Frontend configuration.
This includes the DNs of the GOC and UCSD Factory.
As soon as those DNs change the default configuration should change as well.
Check also in the OSG svn used to build the RPMs. It will need changes as well.

#11 Updated by Marco Mambelli 2 months ago

I changed in the OSG svn repositories (production+upcoming) the references to the factory : gfactory-1.t2.ucsd.edu.
new hostname: gfactory-2.opensciencegrid.org
new DN: /DC=org/DC=incommon/C=US/ST=WI/L=Madison/O=University of Wisconsin-Madison/OU=OCIS/CN=gfactory-2.opensciencegrid.org

There are references also to glidein.grid.iu.edu. Should these just be removed or replaced w/ something else?
I saw the same references also in build/packaging/rpm/frontend.xml

#12 Updated by Lorena Lobato Pardavila about 2 months ago

  • Assignee changed from Lorena Lobato Pardavila to Marco Mascheroni


Also available in: Atom PDF